Configuring Timeouts; Displaying Nat Settings - Extreme Networks Summit 200-24 Installation And User Manual

Configuring Timeouts

When an inside host initiates a session, a session table entry is created. Depending on the type of traffic
or the current TCP state, the table entries timeout after the configured timeout expires.
Table 33 describes the commands used to configure timeout periods.
Table 33: NAT Timeout Commands
Command
config nat finrst-timeout <seconds>
config nat icmp-timeout <seconds>
config nat syn-timeout <seconds>
config nat tcp-timeout <seconds>
config nat udp-timeout <seconds>
config nat timeout <seconds>
show nat timeout

Displaying NAT Settings

To display NAT rules, use the following command:
show nat rules {vlan <outside_vlan>}
This command displays the NAT rules for a specific VLAN. Rules are displayed in the order they are
processed, starting with the first one.
To display NAT traffic statistics, use the following command:
show nat stats
This command displays statistics for the NAT traffic, and includes:
• The number of rules
• The number of current connections
• The number of translated packets on the inside and outside VLANs
• Information on missed translations
To display NAT connection information, use the following command:
show nat connections
This command displays the current NAT connection table, including source IP/Layer 4 port mappings
from inside to outside.
Summit 200 Series Switch Installation and User Guide
Description
Configures the timeout for a TCP session
that has been torn down or reset. The
default setting is 60 seconds.
Configures the timeout for an ICMP packet.
The default setting is 3 seconds.
Configures the timeout for an entry with an
unacknowledged TCP SYN state. The
default setting is 60 seconds.
Configures the timeout for a fully setup TCP
SYN session. The default setting is 120
seconds.
Configures the timeout for an UDP session.
The default setting is 120 seconds.
Configures the timeout for any IP packet that
is not TCP,UDP or ICMP. The default setting
is 600 seconds.
Displays NAT timeout settings.
Displaying NAT Settings
127